Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/5u3rw1GQyWIz0eojHBEnuas7eG4.roa
File: 5u3rw1GQyWIz0eojHBEnuas7eG4.roa (raw, json)
Hash identifier: PYXJQ1C9TqHNcF6BOU+B+JGNiZOiqezJTiMu6/cE3bI=
Subject key identifier: E6:ED:EB:C3:51:90:C9:62:33:D1:EA:23:1C:11:27:B9:AB:3B:78:6E
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 90
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/5u3rw1GQyWIz0eojHBEnuas7eG4.roa
Signing time: Thu 31 Oct 2024 01:30:54 +0000
ROA not before: Thu 31 Oct 2024 01:30:54 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 2527
IP address blocks: 143.189.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Oct 31 01:30:54 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=E6EDEBC35190C96233D1EA231C1127B9AB3B786E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:88:09:4d:50:b1:f2:98:0e:4b:b6:e1:54:
ab:75:78:c4:0e:ac:38:6e:e7:ba:dc:66:11:1c:37:
55:68:cb:c1:1b:9e:c6:c8:0d:74:f1:09:4e:0b:46:
a6:64:16:9c:3a:b0:ad:2f:e9:08:ec:ab:d9:75:29:
34:08:ba:38:f8:89:9f:be:dd:b5:1e:81:e4:6b:7c:
bc:62:90:90:af:0d:bd:74:21:26:3f:e0:ba:15:fc:
3a:83:08:9b:fe:94:ad:d3:16:d2:46:84:11:61:36:
45:98:f6:83:92:96:0b:22:c9:1c:ae:83:cc:c2:39:
4b:0e:cd:48:17:b7:dc:46:e2:a5:db:9c:c6:c7:2a:
6f:ee:57:7d:ae:cc:b2:33:d1:59:23:e4:fe:85:41:
19:00:2d:ee:11:54:e5:ee:eb:1b:08:27:d4:bd:9e:
d7:9b:7f:f5:03:38:1c:57:4c:61:31:e5:66:60:f2:
23:fe:8b:b4:46:6e:5b:bc:9c:fe:4b:59:37:61:22:
ec:54:94:69:f1:b8:cf:a3:ea:ca:49:4d:fd:ed:e0:
25:da:db:1f:e5:05:e1:4c:dc:bc:34:93:84:d2:e3:
e5:78:6c:f2:0f:f2:77:6e:b0:a4:b5:f3:85:be:61:
83:de:a8:ed:0e:63:ee:99:8d:9c:c5:80:fc:e9:3f:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:ED:EB:C3:51:90:C9:62:33:D1:EA:23:1C:11:27:B9:AB:3B:78:6E
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/5u3rw1GQyWIz0eojHBEnuas7eG4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.189.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:b8:02:1f:23:19:00:41:3f:50:67:7a:c3:03:b0:4b:87:1d:
a9:6b:d1:17:50:fb:c7:89:e9:c1:40:ae:a2:00:29:27:78:5b:
f5:d8:cd:1c:e6:e7:31:77:d8:22:a1:68:27:44:ac:b3:c1:f0:
35:5d:29:37:9e:b2:39:3d:6e:6d:3e:81:8c:42:99:10:41:ba:
f1:78:7a:c8:92:fe:f3:c0:ca:b3:2d:15:97:66:b9:b8:cc:f6:
15:e4:19:f2:1f:94:f9:99:54:46:03:b1:1b:18:7c:a9:b8:4a:
64:a6:ca:76:1d:42:fa:8c:15:8b:cd:26:d0:08:ac:bf:47:a7:
8e:ae:cd:78:f4:54:05:4c:06:2c:2f:b9:ad:96:c2:1f:25:b8:
ec:11:80:dc:da:da:b2:45:39:3a:c3:37:e4:24:51:f7:99:7d:
4d:37:2c:74:f7:cb:7e:0c:b7:1d:95:17:90:cd:12:7b:93:f2:
0d:10:11:3f:d6:d1:8f:96:38:ea:8e:fb:d7:61:92:d9:0a:b5:
c4:17:09:bc:05:3d:a3:c2:97:0c:6e:ce:17:21:0c:50:6a:47:
ff:88:82:6a:0f:4c:00:46:08:e9:21:86:9e:96:ee:bc:53:b4:
f0:2e:9d:83:ba:44:a2:ee:47:01:a0:c8:47:a1:09:d2:3b:09:
47:e4:e8:78
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDRD
QTdGMzVBRjFBOEY1MjU3NUE5RkVGRkYyMUM0QTQ3MDgwRERGQTAeFw0yNDEwMzEw
MTMwNTRaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU2RURFQkMzNTE5MEM5
NjIzM0QxRUEyMzFDMTEyN0I5QUIzQjc4NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWvogJTVCx8pgOS7bhVKt1eMQOrDhu57rcZhEcN1Voy8EbnsbI
DXTxCU4LRqZkFpw6sK0v6Qjsq9l1KTQIujj4iZ++3bUegeRrfLxikJCvDb10ISY/
4LoV/DqDCJv+lK3TFtJGhBFhNkWY9oOSlgsiyRyug8zCOUsOzUgXt9xG4qXbnMbH
Km/uV32uzLIz0Vkj5P6FQRkALe4RVOXu6xsIJ9S9ntebf/UDOBxXTGEx5WZg8iP+
i7RGblu8nP5LWTdhIuxUlGnxuM+j6spJTf3t4CXa2x/lBeFM3Lw0k4TS4+V4bPIP
8ndusKS184W+YYPeqO0OY+6ZjZzFgPzpP1olAgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQU5u3rw1GQyWIz0eojHBEnuas7eG4wHwYDVR0jBBgwFoAUBMp/Na8aj1JXWp/v
/yHEpHCA3fowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhDQTNmby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JNcF9OYThhajFKWFdwX3ZfeUhFcEhD
QTNmby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My81dTNydzFHUXlXSXowZW9qSEJFbnVhczdlRzQucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMAj70wDQYJKoZIhvcNAQELBQADggEBAKW4Ah8jGQBBP1BnesMDsEuHHalr0RdQ
+8eJ6cFArqIAKSd4W/XYzRzm5zF32CKhaCdErLPB8DVdKTeesjk9bm0+gYxCmRBB
uvF4esiS/vPAyrMtFZdmubjM9hXkGfIflPmZVEYDsRsYfKm4SmSmynYdQvqMFYvN
JtAIrL9Hp46uzXj0VAVMBiwvua2Wwh8luOwRgNza2rJFOTrDN+QkUfeZfU03LHT3
y34Mtx2VF5DNEnuT8g0QET/W0Y+WOOqO+9dhktkKtcQXCbwFPaPClwxuzhchDFBq
R/+IgmoPTABGCOkhhp6W7rxTtPAunYO6RKLuRwGgyEehCdI7CUfk6Hg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:20:27 2025 by rpki-client